Portscans/PROXY scans

John_York at Dell.com John_York at Dell.com
Sat Nov 1 21:08:09 UTC 2003


Hey gang,

We're seeing an incredible amount of port- and proxy-scans from 211.0.0.0/8,
and 0 legitimate packets from the same range. I'm thinking about blocking
the entire /8, as noone on our network needs any contact with Asia (I belive
those addresses are all in Asia - correct me if I'm wrong). Has anyone here
blocked 211.? Any unexpected results when doing so?

Thanks,
John




More information about the NANOG mailing list